Mediaspace scheduled maintenance: Aug 25, 2026 07:00 - 12:00 AM. During this time, videos will be temporarily unavailable. Check status updates.

Lecture

Network Access Control: Security Overview

Description

This lecture covers various aspects of Network Access Control (NAC) presented at the 2022 Forum SI. Topics include NAC project overview, network segmentation, NAC integration, planned functionalities, project planning phases, and security challenges. The presentation also discusses the importance of strengthening the network perimeter, monitoring login activities, ensuring data resilience, and identifying vulnerabilities. The lecture emphasizes the need for security awareness training, limiting VPN services, and securing access to sensitive servers. The challenges faced by EPFL's security team, recent attack trends, and strategies to enhance security measures are also addressed.

This video is available exclusively on Mediaspace for a restricted audience. Please log in to MediaSpace to access it if you have the necessary permissions.

Watch on Mediaspace

Official source

Related concepts (32)

Security engineering

Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system’s operational capabilities. It is similar to other systems engineering activities in that its primary motivation is to support the delivery of engineering solutions that satisfy pre-defined functional and user requirements, but it has the added dimension of preventing misuse and malicious behavior. Those constraints and restrictions are often asserted as a security policy.

Access control

In physical security and information security, access control (AC) is the selective restriction of access to a place or other resource, while access management describes the process. The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization. Locks and login credentials are two analogous mechanisms of access control. Physical security Geographical access control may be enforced by personnel (e.g. border guard, bouncer, ticket checker), or with a device such as a turnstile.

Mandatory access control

In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system or database constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In the case of operating systems, a subject is usually a process or thread; objects are constructs such as files, directories, TCP/UDP ports, shared memory segments, IO devices, etc. Subjects and objects each have a set of security attributes.

Project planning

Project planning is part of project management, which relates to the use of schedules such as Gantt charts to plan and subsequently report progress within the project environment. Project planning can be done manually or by the use of project management software. Initially, the project scope is defined and the appropriate methods for completing the project are determined. Following this step, the durations for the various tasks necessary to complete the work are listed and grouped into a work breakdown structure.

Project plan

A project plan, according to the Project Management Body of Knowledge (PMBOK), is: "...a formal, approved document used to guide both project execution and project control. The primary uses of the project plan are to document planning assumptions and decisions, facilitate communication among project stakeholders, and document approved scope, cost, and schedule baselines. A project plan may be sumarized or detailed.

Related lectures (32)

Principles II: Complete Mediation, Open Design, Separation of Privilege

Discusses the 'complete mediation', 'open design', and 'separation of privilege' principles to enhance system security.

Discretionary Access Control I

Covers the implementation of Discretionary Access Control using Access Control Matrix and Lists.

Gitlab Agent for Kubernetes (`agentk`)

Covers the setup of a Gitlab agent for Kubernetes, focusing on installation, version control, and troubleshooting.

Computer Security: Basics and Vocabulary

Introduces computer security basics, properties, policy, threat modeling, and key vocabulary for adversarial thinking.

Conditional Access II